The evolution of online services has reached a stage at which difficult decisions about sharing identity and other personal information have to be made. There are inherent conflicts between the desire for privacy, which is also necessary for delivering secure services, and the desire for services that are efficient and easy to use. The topic under discussion is large, extending from enabling single sign-on to a range of services, to sharing large amounts of deeply personal information. In this report we examine how recent developments in standards and approaches move the discussion forward.